A type of firewall in which each packet is examined and either allowed to pass through or is rejected, based on local security policy.